If you have a subscription that includes the Group Policy feature you can configure and license RealVNC Connect using Group Policy, for Windows computers in your environment.
RealVNC Connect v8 is a combined application, allowing for both inbound and outbound connections in a single app. If you want to restrict RealVNC Connect to allow a single connection direction, please refer to the Configuring RealVNC Connect section below.
Installing the RealVNC Connect ADMX templates
Which template files do I need?
The ADMX templates can be downloaded using the button below
Where are the template files installed?
Once the policy template files have been downloaded you will need to extract and copy all files from the .zip folder into the relevant policy directory - this is usually C:\Windows\SYSVOL\domain\Policies\PolicyDefinitions.
Not using a Central Store for Group Policy in your domain?
Instead of the folder above, you need to copy the files to C:\Windows\PolicyDefinitions
How do I use the templates in Group Policy?
RealVNC Connect configuration and licensing is managed using the Group Policy Management Editor, available on a Windows Server acting as a Domain Controller.
The templates appear in Group Policy Management Editor as shown below.
Inbound (RealVNC Server)
Outbound (RealVNC Connect)
Configuring RealVNC Connect
Please use the following table to determine which group of settings to use to configuration a particular area of RealVNC Server and RealVNC Viewer.
| Settings Category | Area | Contains parameters for... |
|---|---|---|
| Inbound | Computer Configuration >RealVNC > RealVNC Server> Service Mode | Inbound connection settings for connections to the device, including authentication, permissions encryption and more. |
| Outbound | User Configuration > RealVNC > RealVNC Connect | Performance, picture quality, useability, locale and more. |
Settings will default to Not configured, meaning RealVNC Connect will use the default value for the parameter.
Settings that are set to Disabled will show as False and settings that are set to Enabled will show as True / the setting value in the RealVNC Connect application.
Allowing inbound connections only
To configure RealVNC Connect to be used for inbound connections only and block outbound connections, you need to set the below combination of parameters:
| Area | Setting name | Setting value | What does the setting do? |
|---|---|---|---|
| User Configuration > RealVNC > RealVNC Connect | AllowOutboundConnections | False | Removes access to the My Device section of the RealVNC Connect app |
| User Configuration > RealVNC > RealVNC Server> Service Mode | CodeConnectOutboundEnable | False | Prevents RealVNC Connect making Code Connect connections to other devices |
| Computer Configuration > RealVNC > RealVNC Server> Service Mode | AllowCloudRfb | True |
Allows RealVNC Connect to listen for cloud connections |
| Computer Configuration > RealVNC > RealVNC Server> Service Mode | AllowIpListenRfb | True | Allows RealVNC Connect to listen for direct connections |
| Computer Configuration > RealVNC > RealVNC Server> Service Mode | CodeConnectInboundEnable | True | Allows RealVNC Connect to accept Code Connect connections from other devices |
| User Configuration > RealVNC > RealVNC Connect | AllowInboundConnections | True | Allows access to the My Device section of the RealVNC Connect app |
Allowing outbound connections only
To configure RealVNC Connect to be used for outbound connections only and block inbound connections, you need to set the below combination of parameters:
| Area | Setting name | Setting value | What does the setting do? |
|---|---|---|---|
| Computer Configuration > RealVNC > RealVNC Server> Service Mode | AllowCloudRfb | False | Prevents RealVNC Connect listening for cloud connections |
| Computer Configuration > RealVNC > RealVNC Server> Service Mode | AllowIpListenRfb | False | Prevents RealVNC Connect listening for direct connections |
| User Configuration > RealVNC > RealVNC Connect | AllowInboundConnections | False | Removes access to the My Device section of the RealVNC Connect app |
| Computer Configuration > RealVNC > RealVNC Server> Service Mode | CodeConnectInboundEnable | False | Prevents RealVNC Connect accepting Code Connect codes/connections |
| User Configuration > RealVNC > RealVNC Server> Service Mode | CodeConnectOutboundEnable | True | Allows RealVNC Connect to make Code Connect connections to other devices |
| User Configuration > RealVNC > RealVNC Connect | AllowOutboundConnections | True | Allows access to the Devices section of the RealVNC Connect app |
Disabling Code Connect
To disable the Code Connect feature in RealVNC Connect, you need to set the below combination of parameters:
| Area | Setting name | Setting value | What does the setting do? |
|---|---|---|---|
| Computer Configuration > RealVNC > RealVNC Server> Service Mode | CodeConnectInboundEnable | False | Prevents RealVNC Connect accepting Code Connect codes/connections |
| User Configuration > RealVNC > RealVNC Server> Service Mode | CodeConnectOutboundEnable | False | Prevents RealVNC Connect making Code Connect connections to other devices |
Licensing RealVNC Connect
The RealVNC Connect v8 beta does not currently support offline licensing.
Comments
Article is closed for comments.